Disabling log entries for rejected users

[Alan DeKok]

On Jan 13, 2016, at 3:39 AM, Michał B <bialyy at o2.pl> wrote:
> If I disable some user in my management software, the "Accept" entry in
> proper "users" file is not generated. The access request for such user
> is logged:
> 
> Jan 13 09:22:13 radsrv freeradius[2152]: Login incorrect (rlm_chap:
> Clear text password not available): [blockeduser/<CHAP-Password>] (from
> client mikrotik-main port 0 cli 194.182.13.200)

  Because you set "auth = yes" in the "log" section of radiusd.conf.

> After adding rejects for blocked users, for example:
> blockeduser Auth-Type := Reject
> 
> The message still appears in the log file:
> Jan 13 09:26:14 radsrv freeradius[2152]: Login incorrect:
> [blockeduser/<CHAP-Password>] (from client mikrotik-main port 0 cli
> 194.182.13.200)
> 
> How can I disable log etries for blocked/rejected users?

  Configure the server to not log bad passwords.  See the "log" section.

  Alan DeKok.